last executing test programs: 23.551482096s ago: executing program 4 (id=101): syz_emit_ethernet(0x4a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x400, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110e0000006a00000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) 21.623016877s ago: executing program 4 (id=108): setuid(0xee00) sched_setaffinity(0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) 17.914666692s ago: executing program 4 (id=113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002a00)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafa, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000081}, 0x0) 17.819694346s ago: executing program 4 (id=117): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) preadv2(r3, 0x0, 0x0, 0x2000, 0x101, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x101, 0x2, 0x0, 0x80], 0x8080000, 0x4}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) 15.084231299s ago: executing program 4 (id=127): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81", 0x10}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.961103598s ago: executing program 1 (id=133): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[{0xc, 0x110, 0xc}], 0xc}, 0x20004000) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x141040, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r6, 0x9, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) 13.960608518s ago: executing program 4 (id=134): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000880)) 12.319050814s ago: executing program 0 (id=140): setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1fc, 0x0, 0xb, 0x148, 0x0, 0x148, 0x168, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x70, 0xd8, 0x0, {0xff0f000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x258) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) prctl$PR_SET_PTRACER(0x59616d61, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffe, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000140)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 11.730886745s ago: executing program 1 (id=141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd700000dcdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300c0100d0008021100000108"], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x2c048010) 10.588914735s ago: executing program 1 (id=145): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000000)={0x202b, 0x0, 0x6}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) 10.579810926s ago: executing program 0 (id=146): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154000000000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000874a9a03f8e40f0000000000000064b36c1f8bff742d3b1e4ac7728f6c9a496790ae077f34427f06639dad2283a2c5b22f90478d402f7cd206c659fbc3584fa4e0dc7f8ff6297fc5491d8f3d2e8ab09894e5180867165c94647f8f249b6a80d2", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250100000008000200020000000800010002000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0xc050) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000ff010000b20000007f00000001640200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000003000000000000000000000000000000009c1fb87e925fa7f0000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x12, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xfffffffffffffede, 0x0, 0x41100}, 0x94) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\pz', @ANYRES16], 0x5c}, 0x1, 0x0, 0x0, 0x40880}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYRES32=r4, @ANYBLOB="1a1b06000802110000000000"], 0x28}, 0x1, 0x0, 0x0, 0x46c1}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x7fff}}, './file0\x00'}) move_mount(r9, &(0x7f0000000140)='./file0\x00', r8, &(0x7f00000005c0)='./file0\x00', 0x40) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x2, 0x1, 0x4000105, 0x10000, 0x6, 0x1}]}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x5}) 10.11862869s ago: executing program 1 (id=147): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = userfaultfd(0x801) poll(&(0x7f0000000480)=[{r2, 0x2040}], 0x1, 0x3e3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x10000, 0x0, {0x77359400}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x4, "20635698"}, 0x3, 0x1, {}, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) eventfd2(0x9, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r3, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000500)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x300, 0x0, 0x0, 0x14, 0x0, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x810, r7, 0x0) 9.73237324s ago: executing program 0 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x31, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2010042, &(0x7f0000000240)={[{@subsystem='cpuacct'}, {@xattr}, {@none}]}) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="18000000010003", 0x7) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, 0x0, 0x0) 8.322036714s ago: executing program 3 (id=149): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={0x0, 0x3, 0xffffffffffffffff, 0x8, 0x80000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) 8.226687829s ago: executing program 2 (id=150): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xfffffffffffffc1f, &(0x7f000000c280)={&(0x7f0000000400)=ANY=[@ANYRES64=r3], 0xac}, 0x1, 0x0, 0x0, 0x2400c854}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(r4, &(0x7f0000000340)='./file0\x00', 0xf3) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000500)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {0x4, 0x6}, [], {0x10, 0x6}}, 0x24, 0x0) 6.361329417s ago: executing program 2 (id=151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0xffd}) 5.735004429s ago: executing program 0 (id=152): ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x80b}}}, 0x7) 5.200788218s ago: executing program 3 (id=153): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000034c0)=[@rthdr_2292={{0x14, 0x29, 0x39, {0xec, 0x0, 0x1, 0x6}}}], 0x14}}], 0x1, 0x0) 5.14644879s ago: executing program 2 (id=154): syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB]) write$FUSE_INIT(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000080)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000040)=ANY=[]) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe7c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe68, 0x1, [@m_pedit={0xe64, 0x1, 0x0, 0x0, {{0xa}, {0xe38, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x14, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe7c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)}], 0x1}, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/685], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 5.14283127s ago: executing program 0 (id=155): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) 4.933096212s ago: executing program 3 (id=156): setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1fc, 0x0, 0xb, 0x148, 0x0, 0x148, 0x168, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x70, 0xd8, 0x0, {0xff0f000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x258) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) prctl$PR_SET_PTRACER(0x59616d61, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffe, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000140)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2.534698857s ago: executing program 2 (id=157): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x464, 0x318, 0x25, 0x148, 0x318, 0x60, 0x3d0, 0x2a8, 0x2a8, 0x3d0, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffffff, 'lo\x00', '\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0x2f8, 0x318, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x5, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x2, 0x0, [{0x6, 0x10, 0xff, 0x80000000}, {0x7, 0x4, 0x8, 0x8}, {0x5, 0x40, 0x6e, 0x8}, {0x1, 0x9, 0x8, 0x10001}, {0x5, 0x6, 0x92, 0x6}, {0xa, 0x96, 0xd3, 0x3}, {0x8, 0x7, 0x3, 0x2}, {0x5, 0xf, 0x40, 0x2}, {0xe, 0x69, 0x2, 0x1}, {0xf2, 0x25, 0xff, 0x10001}, {0x8, 0x7, 0xff, 0x1}, {0x4, 0x1c, 0x2, 0x18}, {0x9, 0x6, 0xa3, 0x9}, {0x8, 0x0, 0x9, 0x5}, {0x2, 0x1, 0xff, 0x7ff}, {0x6c1, 0x8, 0x1, 0x9}, {0x0, 0xd0, 0x6, 0xc5}, {0x1000, 0x8, 0x6, 0x1}, {0x9a6, 0xd, 0x0, 0x800}, {0x7, 0x10, 0x1, 0x1}, {0x8000, 0x96, 0x81, 0xa0000}, {0x9, 0x8, 0x9, 0xff}, {0xb, 0x6, 0x8, 0x9}, {0x862, 0x18, 0x4, 0x9}, {0xffd8, 0xf, 0xae, 0x7fffffff}, {0x8, 0x3, 0x40, 0x3}, {0x4, 0x3, 0x0, 0x2}, {0xffff, 0x3, 0x2, 0x4}, {0x100, 0x3, 0x7, 0x40}, {0x1, 0x58, 0x0, 0x6}, {0x8000, 0x80, 0x4, 0x3}, {0x7, 0x4, 0x5, 0x7f}, {0xc6e, 0x3, 0xc, 0x2}, {0xf, 0x60, 0x1, 0x2}, {0x3af3, 0x3, 0xff, 0x6}, {0xfffe, 0x7, 0x0, 0x2}, {0xc, 0xd1, 0x3}, {0x8, 0x5, 0x8, 0x80000000}, {0xb, 0x7f, 0x0, 0x4}, {0x9f7d, 0xb}, {0x5, 0x9, 0x0, 0x8}, {0x868, 0xc5, 0x12}, {0x7fff, 0xa8, 0x48, 0x10000}, {0x4, 0x0, 0x8, 0x6}, {0x2, 0x2, 0xd, 0xfffffffe}, {0xa3c6, 0x80, 0x60, 0x5}, {0x5c50, 0x6, 0x4, 0x1c000}, {0x99eb, 0x7, 0x80, 0x4}, {0x7f, 0x32, 0xd3, 0x5}, {0x0, 0x9, 0xfc, 0x1}, {0x4, 0x40, 0x7b, 0x5}, {0xd97f, 0x4, 0x8, 0xe}, {0xffc0, 0x4, 0x0, 0x7}, {0x6, 0xd, 0x33, 0x6}, {0x5, 0xf, 0xf9, 0x3}, {0xa, 0x6, 0x80, 0xffff}, {0x3, 0x2, 0x9, 0x2}, {0x50, 0x8, 0x78, 0x8}, {0x820, 0x0, 0xb9, 0x10}, {0xffff, 0x49, 0x1, 0x464}, {0x80, 0x40, 0x76, 0x2}, {0x885, 0x2, 0x9, 0x10000}, {0xe6, 0x0, 0x3, 0x3}, {0x7, 0xc2, 0x8, 0x2}], {0x6}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x10001, 0x10, 'netbios-ns\x00', {0x7}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x4c0) 2.534196597s ago: executing program 2 (id=158): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154000000000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000874a9a03f8e40f0000000000000064b36c1f8bff742d3b1e4ac7728f6c9a496790ae077f34427f06639dad2283a2c5b22f90478d402f7cd206c659fbc3584fa4e0dc7f8ff6297fc5491d8f3d2e8ab09894e5180867165c94647f8f249b6a80d2", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250100000008000200020000000800010002000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0xc050) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000ff010000b20000007f00000001640200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000003000000000000000000000000000000009c1fb87e925fa7f0000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x12, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xfffffffffffffede, 0x0, 0x41100}, 0x94) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\pz', @ANYRES16], 0x5c}, 0x1, 0x0, 0x0, 0x40880}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYRES32=r4, @ANYBLOB="1a1b06000802110000000000"], 0x28}, 0x1, 0x0, 0x0, 0x46c1}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x7fff}}, './file0\x00'}) move_mount(r9, &(0x7f0000000140)='./file0\x00', r8, &(0x7f00000005c0)='./file0\x00', 0x40) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x2, 0x1, 0x4000105, 0x10000, 0x6, 0x1}]}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x5}) 2.524843398s ago: executing program 0 (id=159): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x22}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(0x0, r5) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r6, 0x211, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8}]}, 0x24}}, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) ftruncate(0xffffffffffffffff, 0x2007ffc) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) 1.484292842s ago: executing program 3 (id=160): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r2 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) syz_emit_ethernet(0xe7, &(0x7f0000000500)={@local, @broadcast, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x2, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd1, 0x68, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @local}, {0x0, 0x0, 0xbd, 0x0, @opaque="00daaa940a9223908e4e83dfd5e52937efbf2806c65e8d3eadc30467cc73e725ad599c46995ad7917c147a9b89ca67ea7082c21865378892bb34d4290a343db33b1e7be79da1ff69b2e19fda99eff7b0b272bf9e2c34901eff8c9d13dfc8f39c4053b4fca65d4a93b34336b59fe11eb8cf65edc8e4eb54b4d0df7c967c39f2ecc5d6cc2325ae96804c55129b0df3cb67229cffdf3ca3095e472fc6508a9bdb6860340a9ea46036f1499e9c862e5beea9534877437a"}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e40)={0x54, 0x12, 0x101, 0x0, 0x0, {0x0, 0xfe, 0x4, 0x0, {0x0, 0x2000, [0x0, 0x0, 0x1], [0x8, 0x0, 0x0, 0x100]}, 0x400}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "4cbdf778"}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 1.370803798s ago: executing program 2 (id=161): setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010005000000000004000100000001"], 0x24, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x123200, 0x0) read$FUSE(r0, &(0x7f0000002a80)={0x2020}, 0xfffffffe) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x6080, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x8c, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffed0}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa0}}, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r9, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000053030000060000008c080000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000030000000e00"/28], 0x50) io_uring_setup(0x6582, &(0x7f0000000040)={0x0, 0xa989, 0x20, 0x5, 0x179}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000200)={@local, 0x78}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf000000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000040000002100000000004683000040000000000000"], 0x48) pipe(&(0x7f0000000080)) 262.822946ms ago: executing program 3 (id=162): r0 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000000840)=[{&(0x7f0000000500)=""/213, 0xd5}], 0x1, 0x33, 0x5) 245.436637ms ago: executing program 1 (id=163): socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) syz_emit_ethernet(0x68, &(0x7f0000001000)={@multicast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0x0, 0x0, 0x40, 0x2f, 0x0, @private=0xa010101, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x3, [0x8]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x4}}}}}}}}, 0x0) 112.945184ms ago: executing program 1 (id=164): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={0x0, 0x3, 0xffffffffffffffff, 0x8, 0x80000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) 0s ago: executing program 3 (id=165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x0, 0x0, @ioapic={0xd000, 0xfff, 0x8, 0x8, 0x0, [{0xf, 0xba, 0x90, '\x00', 0xc6}, {0xff, 0x9, 0x6b, '\x00', 0x9}, {0x9, 0x6, 0x1, '\x00', 0x7e}, {0x9, 0x2, 0x7, '\x00', 0xa}, {0x40, 0x9, 0x41, '\x00', 0x9}, {0x0, 0x3, 0x7f, '\x00', 0x5}, {0xa, 0x7c, 0x4, '\x00', 0x1}, {0x1, 0x4, 0xd, '\x00', 0x6}, {0x1, 0x3d, 0x5}, {0xb, 0xf7, 0xa1, '\x00', 0x2}, {0x3, 0x2, 0x3, '\x00', 0xa6}, {0x1, 0xa, 0x9, '\x00', 0x5}, {0x80, 0x9, 0x7, '\x00', 0x5}, {0x79, 0x0, 0x1, '\x00', 0x9}, {0xa7, 0x7, 0x8, '\x00', 0x3}, {0x8, 0x3, 0x3, '\x00', 0x2}, {0x9, 0x9, 0x4, '\x00', 0x4}, {0x78, 0x4, 0xd7, '\x00', 0x9}, {0x0, 0xfa, 0x4}, {0x5, 0x6, 0x0, '\x00', 0x9}, {0x10, 0x10, 0x1, '\x00', 0x4}, {0x81, 0xfa, 0x6, '\x00', 0x5}, {0x1, 0x0, 0xa3, '\x00', 0x7}, {0x8, 0x6c, 0x6, '\x00', 0x7}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0xb28, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts. [ 53.913167][ T4171] cgroup: Unknown subsys name 'net' [ 54.037956][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.547794][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.489308][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 57.502599][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 57.627101][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 57.652800][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 57.693127][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 57.725391][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.733277][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.741309][ T4183] device bridge_slave_0 entered promiscuous mode [ 57.764638][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.771965][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.779719][ T4184] device bridge_slave_0 entered promiscuous mode [ 57.792857][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.799950][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.808800][ T4183] device bridge_slave_1 entered promiscuous mode [ 57.826313][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.833541][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.841661][ T4184] device bridge_slave_1 entered promiscuous mode [ 57.894336][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.914226][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.921323][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.929447][ T4185] device bridge_slave_0 entered promiscuous mode [ 57.938376][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.949801][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.975067][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.982814][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.990515][ T4185] device bridge_slave_1 entered promiscuous mode [ 58.006584][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.031246][ T4184] team0: Port device team_slave_0 added [ 58.037326][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.044531][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.052476][ T4186] device bridge_slave_0 entered promiscuous mode [ 58.066559][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.074003][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.081985][ T4186] device bridge_slave_1 entered promiscuous mode [ 58.096983][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.104308][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.112243][ T4194] device bridge_slave_0 entered promiscuous mode [ 58.120403][ T4184] team0: Port device team_slave_1 added [ 58.151023][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.158248][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.166287][ T4194] device bridge_slave_1 entered promiscuous mode [ 58.175714][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.196864][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.204032][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.230447][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.244967][ T4183] team0: Port device team_slave_0 added [ 58.258505][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.270675][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.280401][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.287830][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.314143][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.326848][ T4183] team0: Port device team_slave_1 added [ 58.346583][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.374842][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.413989][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.423567][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.430508][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.456694][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.470065][ T4185] team0: Port device team_slave_0 added [ 58.478313][ T4186] team0: Port device team_slave_0 added [ 58.485626][ T4185] team0: Port device team_slave_1 added [ 58.516328][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.523827][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.550054][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.563119][ T4186] team0: Port device team_slave_1 added [ 58.585374][ T4184] device hsr_slave_0 entered promiscuous mode [ 58.592350][ T4184] device hsr_slave_1 entered promiscuous mode [ 58.605501][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.612845][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.639294][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.666199][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.673314][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.699595][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.725296][ T4194] team0: Port device team_slave_0 added [ 58.744198][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.751324][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.777427][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.796599][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.803789][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.830017][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.842228][ T4194] team0: Port device team_slave_1 added [ 58.873637][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.880703][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.907402][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.932344][ T4183] device hsr_slave_0 entered promiscuous mode [ 58.939887][ T4183] device hsr_slave_1 entered promiscuous mode [ 58.947262][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.955746][ T4183] Cannot create hsr debugfs directory [ 58.972302][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.979283][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.005768][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.060548][ T4185] device hsr_slave_0 entered promiscuous mode [ 59.067778][ T4185] device hsr_slave_1 entered promiscuous mode [ 59.074859][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.082714][ T4185] Cannot create hsr debugfs directory [ 59.118332][ T4186] device hsr_slave_0 entered promiscuous mode [ 59.125399][ T4186] device hsr_slave_1 entered promiscuous mode [ 59.132488][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.140345][ T4186] Cannot create hsr debugfs directory [ 59.202402][ T4204] Bluetooth: hci0: command 0x0409 tx timeout [ 59.209340][ T4204] Bluetooth: hci2: command 0x0409 tx timeout [ 59.222820][ T4204] Bluetooth: hci3: command 0x0409 tx timeout [ 59.229103][ T4204] Bluetooth: hci1: command 0x0409 tx timeout [ 59.232489][ T4194] device hsr_slave_0 entered promiscuous mode [ 59.235638][ T4204] Bluetooth: hci4: command 0x0409 tx timeout [ 59.248518][ T4194] device hsr_slave_1 entered promiscuous mode [ 59.255781][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.263561][ T4194] Cannot create hsr debugfs directory [ 59.434898][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.477747][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.506005][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.526946][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.570480][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.591300][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.605202][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.635222][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.676375][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.686135][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.697060][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.714245][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.746766][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.785107][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.794989][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.805004][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.815277][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.825868][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.841250][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.850467][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.873664][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.884385][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.894290][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.901690][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.910833][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.935821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.946169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.955831][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.962953][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.005230][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.015639][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.044063][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.054756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.064515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.074571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.084815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.111397][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.123741][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.134195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.143309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.152166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.169064][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.187066][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.198478][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.206474][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.224187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.237020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.256218][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.290852][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.313187][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.325557][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.342818][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.352594][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.363408][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.373245][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.385310][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.395044][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.415577][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.443040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.453205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.464953][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.472083][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.482604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.491252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.500498][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.507879][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.516242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.525030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.533768][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.541002][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.549672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.558867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.568019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.576219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.587667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.596848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.606421][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.613802][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.655135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.664843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.673776][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.681026][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.690442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.699414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.708089][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.715211][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.723214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.739720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.748480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.757870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.766929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.776652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.785191][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.793693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.804409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.813703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.822230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.830118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.838222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.870570][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.880014][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.888860][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.897076][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.907520][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.917535][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.926433][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.939881][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.963166][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.976110][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.985035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.995214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.003691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.012563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.021180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.030172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.045962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.055507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.065296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.074144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.094948][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.118737][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.130439][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.155653][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.171877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.180340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.189764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.198887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.207689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.251721][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.264813][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.282253][ T4240] Bluetooth: hci4: command 0x041b tx timeout [ 61.288601][ T4240] Bluetooth: hci1: command 0x041b tx timeout [ 61.300223][ T4240] Bluetooth: hci3: command 0x041b tx timeout [ 61.304720][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.328481][ T4184] device veth0_vlan entered promiscuous mode [ 61.337898][ T4240] Bluetooth: hci2: command 0x041b tx timeout [ 61.358419][ T4240] Bluetooth: hci0: command 0x041b tx timeout [ 61.362802][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.376876][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.398206][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.407531][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.420259][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.428252][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.436775][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.446249][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.455315][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.462430][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.476435][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.503900][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.524515][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.539020][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.546570][ T4246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.571609][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.589855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.600525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.610378][ T4184] device veth1_vlan entered promiscuous mode [ 61.620590][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.629084][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.649226][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.659056][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.683610][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.693449][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.703007][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.710498][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.723029][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.738011][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.747815][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.765255][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.783207][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.799849][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.841387][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.853939][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.873975][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.884492][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.894530][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.905020][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.914420][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.924940][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.935397][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.944126][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.955580][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.964493][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.982797][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.992246][ T4184] device veth0_macvtap entered promiscuous mode [ 62.038535][ T4184] device veth1_macvtap entered promiscuous mode [ 62.063166][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.084520][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.099565][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.109285][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.120061][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.128446][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.139362][ T4183] device veth0_vlan entered promiscuous mode [ 62.149365][ T4186] device veth0_vlan entered promiscuous mode [ 62.164140][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.172439][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.180362][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.191495][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.219829][ T4183] device veth1_vlan entered promiscuous mode [ 62.243285][ T4186] device veth1_vlan entered promiscuous mode [ 62.255794][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.267857][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.277059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.285611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.294126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.303423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.312633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.321354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.331035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.339679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.364912][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.385015][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.395377][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.405471][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.416388][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.427117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.436725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.444813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.453039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.465602][ T4183] device veth0_macvtap entered promiscuous mode [ 62.486125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.495448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.504797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.515117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.526347][ T4183] device veth1_macvtap entered promiscuous mode [ 62.535899][ T4194] device veth0_vlan entered promiscuous mode [ 62.561821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.569940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.579653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.588559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.596857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.606366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.631216][ T4194] device veth1_vlan entered promiscuous mode [ 62.664548][ T4185] device veth0_vlan entered promiscuous mode [ 62.671147][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.680226][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.690211][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.699096][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.709512][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.718264][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.728974][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.743041][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.755346][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.767467][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.778100][ T4186] device veth0_macvtap entered promiscuous mode [ 62.789345][ T4186] device veth1_macvtap entered promiscuous mode [ 62.810908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.822985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.832458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.843302][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.854786][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.866446][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.880401][ T4185] device veth1_vlan entered promiscuous mode [ 62.920185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.930406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.943304][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.952523][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.961261][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.970785][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.998087][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.007615][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.040965][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.045283][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.057697][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.066354][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.079538][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.090244][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.101512][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.112786][ T4194] device veth0_macvtap entered promiscuous mode [ 63.130708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.142923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.150717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.159790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.173400][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.184169][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.194505][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.205667][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.219485][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.248383][ T4194] device veth1_macvtap entered promiscuous mode [ 63.261165][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.269700][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.278841][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.294419][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.303562][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.313059][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.324726][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.361933][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 63.369177][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 63.377373][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 63.385277][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.389209][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.404753][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 63.409830][ T4246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.411183][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.425917][ T4246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.432379][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.444455][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 63.445264][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.465123][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.475107][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.485781][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.497548][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.508805][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.520223][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.531343][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.543579][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.553949][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.564702][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.576052][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.590992][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.600083][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.608777][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.617842][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.627420][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.636730][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.646138][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.655258][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.666802][ T4185] device veth0_macvtap entered promiscuous mode [ 63.706094][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.717928][ T4185] device veth1_macvtap entered promiscuous mode [ 63.734061][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.734372][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.754041][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.766076][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.777445][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.786714][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.815112][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.858090][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.896098][ T4267] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.907968][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.930192][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.945230][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.961581][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.973637][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.984475][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.995421][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.026101][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.041314][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.052142][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.079228][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.120885][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.137801][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.159693][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.181884][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.197231][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.208602][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.226968][ T4272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6'. [ 64.228226][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.257396][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.318822][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.333968][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.350527][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.360489][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.369783][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.383187][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.469039][ T4246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.503498][ T4246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.613599][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.623544][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.638582][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.648096][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.655241][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.659696][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.680979][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.341536][ C0] sched: RT throttling activated [ 66.344831][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 66.356385][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 66.362783][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 66.365967][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.368848][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 66.402715][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.469332][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.837161][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 67.151630][ T4298] NILFS (loop1): device size too small [ 69.385489][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.412017][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.433711][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.548954][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.569015][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.663776][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.011563][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 71.445747][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.452719][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.745620][ T4334] input: syz1 as /devices/virtual/input/input5 [ 74.064048][ T4330] Set syz1 is full, maxelem 6117 reached [ 74.274213][ T4354] lo speed is unknown, defaulting to 1000 [ 74.280339][ T4354] lo speed is unknown, defaulting to 1000 [ 74.291970][ T4354] lo speed is unknown, defaulting to 1000 [ 74.311114][ T4354] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 74.346308][ T4354] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 74.481563][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 74.512765][ T4357] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 74.539974][ T4354] lo speed is unknown, defaulting to 1000 [ 74.546616][ T4302] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.712363][ T4354] lo speed is unknown, defaulting to 1000 [ 74.718856][ T4354] lo speed is unknown, defaulting to 1000 [ 74.742400][ T4354] lo speed is unknown, defaulting to 1000 [ 74.758978][ T4354] lo speed is unknown, defaulting to 1000 [ 74.821827][ T4302] usb 1-1: Using ep0 maxpacket: 8 [ 74.971851][ T4302] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 74.997444][ T4302] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.206163][ T4302] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.217187][ T4302] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.227445][ T4302] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.242341][ T4302] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 75.251417][ T4302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.541831][ T4302] usb 1-1: usb_control_msg returned -32 [ 75.548767][ T4302] usbtmc 1-1:16.0: can't read capabilities [ 76.690767][ T4302] usb 1-1: USB disconnect, device number 2 [ 76.934854][ T4392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.30'. [ 78.211548][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 78.241545][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 78.271543][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 78.501654][ T4408] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 78.950385][ T4423] lo speed is unknown, defaulting to 1000 [ 78.959765][ T4423] lo speed is unknown, defaulting to 1000 [ 78.967857][ T4423] lo speed is unknown, defaulting to 1000 [ 79.007741][ T4423] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 79.142783][ T4423] lo speed is unknown, defaulting to 1000 [ 79.155305][ T4423] lo speed is unknown, defaulting to 1000 [ 79.162542][ T4423] lo speed is unknown, defaulting to 1000 [ 79.177276][ T4423] lo speed is unknown, defaulting to 1000 [ 79.195331][ T4423] lo speed is unknown, defaulting to 1000 [ 79.697784][ T4302] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.951777][ T4302] usb 3-1: Using ep0 maxpacket: 8 [ 80.072000][ T4302] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 81.191691][ T4302] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.288471][ T4302] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.355061][ T4302] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.411806][ T4302] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.475773][ T4302] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.511571][ T4302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.684763][ T1107] cfg80211: failed to load regulatory.db [ 81.719025][ T4445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.46'. [ 81.831831][ T4302] usb 3-1: usb_control_msg returned -32 [ 81.837553][ T4302] usbtmc 3-1:16.0: can't read capabilities [ 82.947100][ T21] usb 3-1: USB disconnect, device number 2 [ 83.146891][ T4471] netlink: 'syz.1.53': attribute type 4 has an invalid length. [ 83.154655][ T4471] netlink: 17 bytes leftover after parsing attributes in process `syz.1.53'. [ 86.473195][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.580739][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.613242][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.655009][ T4496] device bridge_slave_0 left promiscuous mode [ 86.662364][ T4496] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.738499][ T4492] trusted_key: encrypted_key: insufficient parameters specified [ 86.837007][ T4496] device bridge_slave_1 left promiscuous mode [ 86.901848][ T4496] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.969886][ T4496] bond0: (slave bond_slave_0): Releasing backup interface [ 87.070038][ T4496] bond0: (slave bond_slave_1): Releasing backup interface [ 87.132742][ T4492] Zero length message leads to an empty skb [ 87.348916][ T4496] team0: Port device team_slave_0 removed [ 87.446632][ T4320] hid-generic 0008:0001:03FF.0001: item fetching failed at offset 5/6 [ 87.458078][ T4320] hid-generic: probe of 0008:0001:03FF.0001 failed with error -22 [ 87.465593][ T4496] team0: Port device team_slave_1 removed [ 87.523183][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.535585][ T4513] process 'syz.2.68' launched './file2' with NULL argv: empty string added [ 87.581914][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.648901][ T4496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.665703][ T150] block nbd2: Attempted send on invalid socket [ 87.673629][ T150] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 87.678999][ T4496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.694294][ T4513] EXT4-fs (nbd2): unable to read superblock [ 88.451556][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 88.471552][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 88.481553][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 88.491552][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 88.501549][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 90.620664][ T4528] 9pnet_virtio: no channels available for device syz [ 92.347820][ T4549] overlayfs: conflicting lowerdir path [ 97.213537][ T4595] tmpfs: Unknown parameter 'usrquota' [ 98.822092][ T4622] 9pnet_virtio: no channels available for device syz [ 99.081790][ T4626] syz.3.105 uses obsolete (PF_INET,SOCK_PACKET) [ 103.694829][ T4665] lo speed is unknown, defaulting to 1000 [ 103.937006][ T4675] lo speed is unknown, defaulting to 1000 [ 105.094653][ T4724] binder: 4713:4724 ioctl c0285840 0 returned -22 [ 107.408822][ T4771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.131'. [ 107.454239][ T4772] netlink: 4764 bytes leftover after parsing attributes in process `syz.3.129'. [ 107.635868][ T4772] netlink: 'syz.3.129': attribute type 5 has an invalid length. [ 109.683382][ T4797] binder: 4794:4797 ioctl c0285840 200000000000 returned -22 [ 116.482148][ T4851] program syz.2.154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.357808][ T4240] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 120.861702][ T4240] Bluetooth: hci1: Injecting HCI hardware error event [ 120.869987][ T4201] Bluetooth: hci1: hardware error 0x00 [ 121.395661][ T4870] [ 121.398208][ T4870] ====================================================== [ 121.405245][ T4870] WARNING: possible circular locking dependency detected [ 121.412280][ T4870] syzkaller #0 Not tainted [ 121.416709][ T4870] ------------------------------------------------------ [ 121.423740][ T4870] syz.2.161/4870 is trying to acquire lock: [ 121.429635][ T4870] ffff88801db90c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 121.440699][ T4870] [ 121.440699][ T4870] but task is already holding lock: [ 121.448260][ T4870] ffffffff8d6c5de8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 121.457928][ T4870] [ 121.457928][ T4870] which lock already depends on the new lock. [ 121.457928][ T4870] [ 121.468416][ T4870] [ 121.468416][ T4870] the existing dependency chain (in reverse order) is: [ 121.477515][ T4870] [ 121.477515][ T4870] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 121.485508][ T4870] __mutex_lock_common+0x1e3/0x2400 [ 121.491234][ T4870] mutex_lock_nested+0x17/0x20 [ 121.496521][ T4870] rfkill_register+0x33/0x980 [ 121.501808][ T4870] hci_register_dev+0x452/0x970 [ 121.507444][ T4870] vhci_create_device+0x32c/0x5c0 [ 121.513252][ T4870] vhci_write+0x391/0x450 [ 121.518107][ T4870] vfs_write+0x745/0xd60 [ 121.522872][ T4870] ksys_write+0x152/0x260 [ 121.527728][ T4870] do_syscall_64+0x4c/0xa0 [ 121.532669][ T4870] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.539091][ T4870] [ 121.539091][ T4870] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 121.547090][ T4870] __mutex_lock_common+0x1e3/0x2400 [ 121.552812][ T4870] mutex_lock_nested+0x17/0x20 [ 121.558114][ T4870] vhci_send_frame+0x88/0x100 [ 121.563313][ T4870] hci_send_frame+0x1a9/0x2e0 [ 121.568508][ T4870] hci_tx_work+0x9f9/0x1710 [ 121.573567][ T4870] process_one_work+0x85f/0x1010 [ 121.579029][ T4870] worker_thread+0xaa6/0x1290 [ 121.584402][ T4870] kthread+0x436/0x520 [ 121.588991][ T4870] ret_from_fork+0x1f/0x30 [ 121.594016][ T4870] [ 121.594016][ T4870] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 121.603402][ T4870] __flush_work+0x116/0x210 [ 121.608431][ T4870] hci_dev_do_close+0x1e7/0x1030 [ 121.613891][ T4870] hci_dev_close+0xd7/0x180 [ 121.619001][ T4870] sock_do_ioctl+0xfb/0x320 [ 121.624024][ T4870] sock_ioctl+0x4d2/0x710 [ 121.628876][ T4870] __se_sys_ioctl+0xfa/0x170 [ 121.633988][ T4870] do_syscall_64+0x4c/0xa0 [ 121.638924][ T4870] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.645338][ T4870] [ 121.645338][ T4870] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 121.652984][ T4870] __mutex_lock_common+0x1e3/0x2400 [ 121.658809][ T4870] mutex_lock_nested+0x17/0x20 [ 121.664226][ T4870] bg_scan_update+0x44/0x3b0 [ 121.669464][ T4870] process_one_work+0x85f/0x1010 [ 121.675019][ T4870] worker_thread+0xaa6/0x1290 [ 121.680238][ T4870] kthread+0x436/0x520 [ 121.684828][ T4870] ret_from_fork+0x1f/0x30 [ 121.689765][ T4870] [ 121.689765][ T4870] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 121.699758][ T4870] __lock_acquire+0x2c42/0x7d10 [ 121.705223][ T4870] lock_acquire+0x19e/0x400 [ 121.710359][ T4870] __flush_work+0x116/0x210 [ 121.715387][ T4870] __cancel_work_timer+0x3f4/0x560 [ 121.721024][ T4870] hci_request_cancel_all+0xcc/0x300 [ 121.726919][ T4870] hci_dev_do_close+0x4e/0x1030 [ 121.732290][ T4870] hci_rfkill_set_block+0x10a/0x190 [ 121.738008][ T4870] rfkill_set_block+0x1c9/0x3d0 [ 121.743384][ T4870] rfkill_fop_write+0x452/0x560 [ 121.748749][ T4870] vfs_write+0x30b/0xd60 [ 121.753510][ T4870] ksys_write+0x152/0x260 [ 121.758446][ T4870] do_syscall_64+0x4c/0xa0 [ 121.763414][ T4870] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.770004][ T4870] [ 121.770004][ T4870] other info that might help us debug this: [ 121.770004][ T4870] [ 121.780445][ T4870] Chain exists of: [ 121.780445][ T4870] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 121.780445][ T4870] [ 121.796281][ T4870] Possible unsafe locking scenario: [ 121.796281][ T4870] [ 121.803729][ T4870] CPU0 CPU1 [ 121.809121][ T4870] ---- ---- [ 121.814497][ T4870] lock(rfkill_global_mutex); [ 121.819269][ T4870] lock(&data->open_mutex); [ 121.826465][ T4870] lock(rfkill_global_mutex); [ 121.833848][ T4870] lock((work_completion)(&hdev->bg_scan_update)); [ 121.840433][ T4870] [ 121.840433][ T4870] *** DEADLOCK *** [ 121.840433][ T4870] [ 121.848746][ T4870] 1 lock held by syz.2.161/4870: [ 121.853681][ T4870] #0: ffffffff8d6c5de8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 121.863781][ T4870] [ 121.863781][ T4870] stack backtrace: [ 121.869683][ T4870] CPU: 1 PID: 4870 Comm: syz.2.161 Not tainted syzkaller #0 [ 121.876982][ T4870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.887051][ T4870] Call Trace: [ 121.890356][ T4870] [ 121.893298][ T4870] dump_stack_lvl+0x188/0x250 [ 121.898006][ T4870] ? load_image+0x400/0x400 [ 121.902607][ T4870] ? show_regs_print_info+0x20/0x20 [ 121.907898][ T4870] ? print_circular_bug+0x12b/0x1a0 [ 121.913196][ T4870] check_noncircular+0x296/0x330 [ 121.918166][ T4870] ? add_chain_block+0x940/0x940 [ 121.923203][ T4870] ? lockdep_lock+0xf1/0x1f0 [ 121.927802][ T4870] ? __lock_acquire+0x12e8/0x7d10 [ 121.932838][ T4870] ? mark_lock+0x94/0x320 [ 121.937171][ T4870] __lock_acquire+0x2c42/0x7d10 [ 121.942043][ T4870] ? verify_lock_unused+0x140/0x140 [ 121.947268][ T4870] ? verify_lock_unused+0x140/0x140 [ 121.952474][ T4870] ? mark_lock+0x94/0x320 [ 121.956805][ T4870] lock_acquire+0x19e/0x400 [ 121.961325][ T4870] ? __flush_work+0xfa/0x210 [ 121.965918][ T4870] ? __lock_acquire+0x7d10/0x7d10 [ 121.970945][ T4870] ? read_lock_is_recursive+0x10/0x10 [ 121.976347][ T4870] ? start_flush_work+0x776/0x820 [ 121.981377][ T4870] __flush_work+0x116/0x210 [ 121.985885][ T4870] ? __flush_work+0xfa/0x210 [ 121.990481][ T4870] ? flush_work+0x20/0x20 [ 121.994819][ T4870] ? try_to_grab_pending+0xfa/0x7f0 [ 122.000127][ T4870] ? mark_lock+0x94/0x320 [ 122.004477][ T4870] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 122.010659][ T4870] ? lock_chain_count+0x20/0x20 [ 122.015513][ T4870] ? mark_lock+0x94/0x320 [ 122.019846][ T4870] ? __cancel_work_timer+0x36a/0x560 [ 122.025225][ T4870] __cancel_work_timer+0x3f4/0x560 [ 122.030344][ T4870] ? cancel_work_sync+0x20/0x20 [ 122.035316][ T4870] ? __cancel_work+0x1f9/0x2e0 [ 122.040085][ T4870] ? lockdep_hardirqs_on+0x94/0x140 [ 122.045305][ T4870] ? __cancel_work+0x27b/0x2e0 [ 122.050078][ T4870] ? cancel_work+0x20/0x20 [ 122.054493][ T4870] ? lock_chain_count+0x20/0x20 [ 122.059488][ T4870] hci_request_cancel_all+0xcc/0x300 [ 122.064967][ T4870] hci_dev_do_close+0x4e/0x1030 [ 122.069907][ T4870] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 122.075919][ T4870] ? _raw_spin_unlock+0x40/0x40 [ 122.080857][ T4870] hci_rfkill_set_block+0x10a/0x190 [ 122.086084][ T4870] ? rcu_lock_release+0x20/0x20 [ 122.091055][ T4870] rfkill_set_block+0x1c9/0x3d0 [ 122.095913][ T4870] rfkill_fop_write+0x452/0x560 [ 122.100766][ T4870] ? rfkill_fop_read+0x520/0x520 [ 122.105838][ T4870] ? common_file_perm+0x140/0x1c0 [ 122.110885][ T4870] ? fsnotify_perm+0x5d/0x560 [ 122.115568][ T4870] ? security_file_permission+0x75/0xa0 [ 122.121130][ T4870] ? rfkill_fop_read+0x520/0x520 [ 122.126288][ T4870] vfs_write+0x30b/0xd60 [ 122.130537][ T4870] ? file_end_write+0x250/0x250 [ 122.135653][ T4870] ? __fget_files+0x40f/0x480 [ 122.140341][ T4870] ? __fdget_pos+0x1e2/0x370 [ 122.144935][ T4870] ? ksys_write+0x71/0x260 [ 122.149536][ T4870] ksys_write+0x152/0x260 [ 122.153966][ T4870] ? __ia32_sys_read+0x80/0x80 [ 122.158739][ T4870] ? lockdep_hardirqs_on+0x94/0x140 [ 122.163943][ T4870] do_syscall_64+0x4c/0xa0 [ 122.168374][ T4870] ? clear_bhb_loop+0x30/0x80 [ 122.173254][ T4870] ? clear_bhb_loop+0x30/0x80 [ 122.177931][ T4870] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.183827][ T4870] RIP: 0033:0x7f57dfdd2dd9 [ 122.188248][ T4870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.207853][ T4870] RSP: 002b:00007f57de00b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.216275][ T4870] RAX: ffffffffffffffda RBX: 00007f57e004c090 RCX: 00007f57dfdd2dd9 [ 122.224479][ T4870] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 122.232539][ T4870] RBP: 00007f57dfe68d69 R08: 0000000000000000 R09: 0000000000000000 [ 122.240694][ T4870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.248667][ T4870] R13: 00007f57e004c128 R14: 00007f57e004c090 R15: 00007ffd009fd538 [ 122.256825][ T4870] [ 122.259883][ C1] vkms_vblank_simulate: vblank timer overrun